1596 matches found
The vulnerability of the web interface of Cisco Small Business router microprogramming software models 200, 300, and 500 allows a hacker to cause a service failure.
The vulnerability of the web interface of Cisco Small Business router microprogramming software models 200, 300, and 500 exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure by sending a speciall...
The vulnerability of the Border Gateway Protocol (BGP) implementation in the Cisco IOS XR operating system allows a attacker to cause a service failure.
The vulnerability of the Border Gateway Protocol BGP implementation in the Cisco IOS XR operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the g_markup_parse_context_parse function in the Glib library allows a hacker to trigger a service failure.
The vulnerability of the gmarkupparsecontextparse function gmarkup.c, method utf8str in the Glib library is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
The vulnerability in the implementation of the NFS protocol in Linux operating systems allows a hacker to trigger a service failure.
The vulnerability of the NFS protocol implementation in Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the fly-weather software package for the Astra Linux operating system, related to a validation error in the input data received from web servers, allows attackers to trigger a service failure.
The vulnerability of the fly-weather software package for the Astra Linux operating system is related to a validation error in the input data received from the web server. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...
CVE-2018-16386
An issue was discovered in SWIFT Alliance Web Platform 7.1.23. A log injection and an arbitrary log filename can be achieved via the PATHINFO to swp/login/EJBRemoteService/, related to com.swift.ejbgwt.j2ee.client.EjBlnvocationException error log information containing null@java:comp/env/ error...
Hawtio 2.5.0 Server Side Request Forgery
CipherTechs Inc - Security Advisory Hawtio Server-Side Request Forgery Introduction ============ Hawtio https://hawt.io/ is a modular web console for managing Java. CipherTechs discovered that Hawtio up to and including version 2.5.0 is vulnerable to unauthenticated Server-Side Request Forgery...
The vulnerability of the Intel PROSet/Wireless WiFi networking utility, related to resource release errors, allows a hacker to trigger a service failure.
The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to resource release errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
The vulnerability of the Local Security Authority Subsystem Service (LSASS) in the Windows operating system allows a hacker to induce a service failure.
The vulnerability of the Local Security Authority Subsystem Service LSASS in the Windows operating system is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the Microsoft Internet Information Services network services for Windows operating systems, related to data processing errors, allows a perpetrator to cause a service failure.
The vulnerability of the Microsoft Internet Information Services IIS Server lies in data processing errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
Vulnerabilities of .NET Core, Microsoft.NET Framework, and PowerShell Core automation frameworks, related to errors in request processing, allowing attackers to trigger service failures.
Vulnerabilities of .NET Core, Microsoft.NET Framework, and PowerShell Core automation frameworks are related to request processing errors. Exploiting these vulnerabilities allows attackers to remotely cause service failures by sending specially crafted requests...
The vulnerability of the roaming_read and roaming_write functions in the OpenSSH cryptographic security tool allows a hacker to induce a service failure.
The vulnerability of the roamingread and roamingwrite functions in the OpenSSH cryptographic protection mechanism arises due to a buffer overflow in the dynamic memory. Exploiting this vulnerability allows a malicious actor to cause a service failure from a remote location...
The vulnerability of the Locally Significant Certificate (LSC) management mechanism in Cisco Wireless LAN Controller (WLC) software allows a attacker to cause a service failure.
The vulnerability of the Locally Significant Certificate LSC management mechanism in Cisco Wireless LAN Controllers WLC is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
Vulnerability of .NET Core and Microsoft .NET Framework software platforms, related to errors in regular expression processing, allowing attackers to trigger service failures.
The vulnerability of.NET Core and Microsoft.NET Framework software lies in errors that occur during the processing of regular expressions. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the MDC2_Update function in the OpenSSL library, which allows a hacker to trigger a service failure
The vulnerability of the MDC2Update function crypto/mdc2/mdc2dgst.c in the OpenSSL library is due to a numerical overflow condition. Exploiting this vulnerability could allow a malicious actor to cause a service failure remotely...
ALPINE-CVE-2019-5953
Buffer overflow in GNU Wget 1.20.1 and earlier allows remote attackers to cause a denial-of-service DoS or may execute an arbitrary code via unspecified vectors...
Malicious Package
Overview The package donotinstallthis contained malicious code. The package contained a script that was run as part of the install script. The script contacted a remote service tracking how many installations were done. There is no further compromise. Recommendation Remove the package from your...
The vulnerability of the Server Message Block (SMB) microprogramming system used by Cisco Firepower Threat Defense allows a perpetrator to induce a service failure.
The vulnerability of the Server Message Block SMB microprogramming system used in Cisco Firepower Threat Defense is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...
The vulnerability of the JSON-lib library used in REST plugins of the Apache Struts software framework allows attackers to induce a service failure.
The vulnerability of the JSON-Lib library used in Apache Struts’ REST framework programming platform is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
The vulnerability of the Server Message Block (SMB) microprogramming system used by Cisco Firepower Threat Defense allows a perpetrator to induce a service failure.
The vulnerability of the Server Message Block SMB microprogramming system used in Cisco Firepower Threat Defense is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...